Overview

overview

7

Static

static

3

Your.Only.....0.zip

windows7-x64

1

Your.Only....ar.zip

windows7-x64

1

Your.Only...._5.zip

windows7-x64

1

Your.Only....ku.zip

windows7-x64

1

Your.Only....oi.zip

windows7-x64

1

Your.Only....sd.zip

windows7-x64

1

Your.Only....sd.zip

windows7-x64

1

Your.Only....ne.zip

windows7-x64

1

Your.Only....hd.zip

windows7-x64

1

Your.Only....or.zip

windows7-x64

1

Your.Only.....2.zip

windows7-x64

1

Your.Only....od.zip

windows7-x64

1

Your.Only....hd.zip

windows7-x64

1

Your.Only....er.zip

windows7-x64

1

Your.Only....er.zip

windows7-x64

1

Your.Only.....3.zip

windows7-x64

1

Your.Only....64.dll

windows7-x64

1

Your.Only....64.dll

windows7-x64

1

Your.Only....me.txt

windows7-x64

1

Your.Only....ge.txt

windows7-x64

1

Your.Only....rt.txt

windows7-x64

1

Your.Only....fg.dll

windows7-x64

1

Your.Only....bfg.so

windows7-x64

3

Your.Only....40.dll

windows7-x64

1

Your.Only....up.exe

windows7-x64

7

Your.Only....up.exe

windows7-x64

7

Your.Only....st.exe

windows7-x64

7

Your.Only....64.exe

windows7-x64

7

Your.Only....86.exe

windows7-x64

7

Your.Only....64.exe

windows7-x64

7

Your.Only....86.exe

windows7-x64

7

Your.Only....st.msi

windows7-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Your.Only.Move.is.HUSTLE.v1.7.0.zip

  • Size

    171.6MB

  • Sample

    231015-1blykscd22

  • MD5

    44578a62f91ada6b79a72ad8822998e6

  • SHA1

    eb16d9056a88168c499f1fd90de05f1083b79a47

  • SHA256

    536a4e17fe9dfa2d39398ccd6709933200229d2acad9956ac93fdd0b085784ee

  • SHA512

    21d5d6757d700a7e7d1c82a97fe5e8107a3d97af9ee7c3369779d4a0fd57284e61468db9a6783b7b15e4289e1f78dfb315cc77065a63f780d9d73557b820f8ec

  • SSDEEP

    3145728:CPcs8K02V2hTacsOG7tlUl1HPPqOCevcUDhS3B7r0Xm5yzGcoXGZTPLCwGbFTmfq:6c13TxNUQ1HjjvcTEKqoXGZjLCwGbxmS

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0.zip

    • Size

      171.6MB

    • MD5

      44578a62f91ada6b79a72ad8822998e6

    • SHA1

      eb16d9056a88168c499f1fd90de05f1083b79a47

    • SHA256

      536a4e17fe9dfa2d39398ccd6709933200229d2acad9956ac93fdd0b085784ee

    • SHA512

      21d5d6757d700a7e7d1c82a97fe5e8107a3d97af9ee7c3369779d4a0fd57284e61468db9a6783b7b15e4289e1f78dfb315cc77065a63f780d9d73557b820f8ec

    • SSDEEP

      3145728:CPcs8K02V2hTacsOG7tlUl1HPPqOCevcUDhS3B7r0Xm5yzGcoXGZTPLCwGbFTmfq:6c13TxNUQ1HjjvcTEKqoXGZjLCwGbxmS

    Score
    1/10
    behavioral1

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/DiavoloChar.zip

    • Size

      11.6MB

    • MD5

      5ee305a212af55bb7f707d155155ac28

    • SHA1

      4c36fbadd09b222c5293d9f381c1b1c3050b4bf1

    • SHA256

      d5b27f96f92abc407cf1f326bfa8c28a2ee8f8a10def47ee452a0a5330c48d4e

    • SHA512

      a1d747239e6015de8c8c522c14265537396997ed6bf0e911b7d34a1b18c2c48f4df5cfee11afcb18fdd0075369a67f144dcf8554fc122880b3e3acc7afb6b711

    • SSDEEP

      196608:TakswouRZdw0htxeRpvQ56/BnqJNRawambFcXujSJ7tZUWrZclwcsPN7xBBXUHXP:Hs2HApQQRIawaEFcXv7TUWOlVsFtb3wH

    Score
    1/10
    behavioral2

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/Doubledown_5.zip

    • Size

      4.1MB

    • MD5

      982b7541896ba7356610506f6265013a

    • SHA1

      c28e995947763c1d1fbc5b0afbe97cfbb3388cf1

    • SHA256

      85a8341239ddd7ebeab615f47ed834196f3e0fb4f540c01833a2a5f909cc1b04

    • SHA512

      e08c087176fbf1191113a75b2cc113a8ae8aaf3ecd1f4b2098ba75adba4475cc1f4988e50d4acab44cd9408b7561d91d6c84ccc38d31567ba4c6a5852a623d07

    • SSDEEP

      98304:4p1Z+QAP7Wm0Nd/fzrcsHvZYz5RLB8s4lSDy0vzIJt8vxU:43JsWl//hHv05das4sDyVJtExU

    Score
    1/10
    behavioral3

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/Goku.zip

    • Size

      10.6MB

    • MD5

      a01d0e873dfbf71c9574afeef5b63355

    • SHA1

      eb40f33eaa3e0982d8f5d4e2cdc224e12746a499

    • SHA256

      8f3f17d16a33d5384913ab9975688491096ee6bee751f3f246d280ff849084f2

    • SHA512

      d0ae14d7d281e350d31b58afcaf7ce395db83508efb048ded5edf00f9fc829b8909aea16cd0fe56126d74a19579c8e0117eadf303745a3c1cae1e5ed7a464011

    • SSDEEP

      196608:hIRjrMCNxTOsk/G+X7QEBcLQeV/f7364WAxihCWqV2HdQ+s5ZNhAIWJix:e/xTOHG+X7TBJI/fDJriA7uQ3DAXQx

    Score
    1/10
    behavioral4

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/Kuroi.zip

    • Size

      306KB

    • MD5

      e0c16618575510ff0e215602dc661e27

    • SHA1

      e6f3fbf775b436aa3ec805a4d41f654ccc69d7da

    • SHA256

      f39a244c7d1623531d08767a0a74f96a357c20da5d51c1183174a076f33e6b76

    • SHA512

      0e59a06db05e03bf7803518ac1ef19b71af78ddcd782e0b833de8e66c6bc3010974d7f064922b2c09de52f44b0ae378540e700130574c15a16ee082d2351803d

    • SSDEEP

      6144:2ytWaYMw2smLGlBve7dKvCPRE+JgZar+9syhmMhfu1IpBJxLHdOdQ2vkgh2:2ytWa7xEoR6Zar+9szMh21CJ5mDTh2

    Score
    1/10
    behavioral5

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/Lunaticahisgduiasd.zip

    • Size

      4.7MB

    • MD5

      d36488a1ab1a77381f387a1082523380

    • SHA1

      5784bd2969bf52d9c7f99e3af223e08822f95425

    • SHA256

      82ea9e3246837a2731936c7c2eff990742a6cca3ae2bb7b96bb2e20711e53068

    • SHA512

      f3f1d46ce4f2f7b06785653b104a0dc421bcaab2d02741542f729840f31073eb0dd8b1c88679e7507cb796f83c49c3292313e3d6a18f9fd9065d922d683c02ed

    • SSDEEP

      98304:+er8bqyJRM2DmnXXHDSNDbBZF1+yADDk1R4GOpi/13BcsRUXQEjWOBgx81gAcCgk:/oJRZDmX3GhkPHk1R4GD93BcsRkuOBDt

    Score
    1/10
    behavioral6

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/MWjhagvsdjasd.zip

    • Size

      7.3MB

    • MD5

      3cc0f4a956332a758dac4e328b660f37

    • SHA1

      65f7865452a097e2d5bc20a2bd97f0b67af0f72b

    • SHA256

      dbd1e733014b65eb12b7573a4c817e30736832752ba9969e62843998c61a6cc2

    • SHA512

      1e98d310673cb39ed439ee68a6409cab6272e8992a29d0c9a678bb3d23db8e4c4fb7bfd2d1155efaa29100cdee905967bcdf982ad9c14bec28504997aac1c14d

    • SSDEEP

      196608:Z4YT3HS7dqtjijwSsWbvWAT/WLu61ZmklQZ/ox263K0iH:CKHq82psWbJ/0X3mklm83KB

    Score
    1/10
    behavioral7

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/Machine.zip

    • Size

      9.2MB

    • MD5

      739ac9c933c10797e34c6ec78189d078

    • SHA1

      ea80807c7c8e628028bafd01077f59553efc8be2

    • SHA256

      e2c3900d319585b7aa30789ce3209ab235cbc6d056c878333cb1c3a0621c9dcb

    • SHA512

      0d029413660ea5fc5497c80ff6c040bdd78a4ae8df5efb5dd6abc48e5182c85a20fc4f19b7e0763e23bb560fff0b48f157755daacc40709410b4ec14e50e165b

    • SSDEEP

      196608:U4xo0yzg8hr4IyA16SpJ3YhiMQorHBoPR0Le/VOIgi08D:UxzZmmIBQYBoHYMD

    Score
    1/10
    behavioral8

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/Mikoasjkdhgauishd.zip

    • Size

      13.8MB

    • MD5

      98d663f34596fe430bbfddeab52a3f95

    • SHA1

      cd2516494889c50b4affd8fd24d4e64a300d52ac

    • SHA256

      69998a6dae57a9ec658bc68e9cfc85fa33e1771f6995594364298fa476eabd7b

    • SHA512

      f8fa9d432e0b91f3d6fc4c77721106e0f82a336dd61f1f5bfb796094ee4993f5bbca0eefb71c7cef2fefb79a5fa09a596c50d097e851cfae4354677f98e40899

    • SSDEEP

      393216:fsxWyrrwBsm+42HVVe9jhQQPofhCdukkegie8cF:fWvHwymX2HVVOhQuof+u2Q3F

    Score
    1/10
    behavioral9

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/Senator.zip

    • Size

      4.9MB

    • MD5

      79c4f7f19ba55f5603b547f9c2ee81fd

    • SHA1

      64358651d0d3a06495ee605a4168053235ea75a1

    • SHA256

      411a9c4ccee48097d11bf588030e3388389957ce00bac15a28d3291af8c8c1df

    • SHA512

      b32353a459867a590d427f1e0285a5d895836c758646b1d724a3832225debaac7eec60c008750e5dbe4961bef63b46c18ac2dc533e10575af45665249c3bcf40

    • SSDEEP

      98304:1KsMSj8AakNQYQr9AmLjIxzJJhRnmz3JKN8cNHD/rWkzaSfaBMl82En521:1KsMSjOxYQrP2znhRnKKN8knDras8DnE

    Score
    1/10
    behavioral10

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/SoupModOptions_v1.2.zip

    • Size

      24KB

    • MD5

      becfa1a11668a6369d5a4f01b80d81b5

    • SHA1

      1deaf1773ab83bd4f697d7c7cf9988a3ab418ca8

    • SHA256

      6b2b7ed5c51995767b5a2a17d3c2ad5c22c5d0d8712105d8b26d22ae0697da03

    • SHA512

      5a37318990a37478b5c41f2e9eefde773e45593d80308b7366b05db5612a1b39ac29bb3844417f4c81d94e5c5f0d09538d42ecae5f5b7c4a58f68c5694c7f4fc

    • SSDEEP

      384:ZCc1xc1eMtkBp35DFYSsVbKgebUSQxIitYxKLyXpv/XhAjaoGxH9BHI2MwIcVcOg:ZH1y1eMt7jmxbUIiBLCR9fjMe2OUWny

    Score
    1/10
    behavioral11

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/StageWaterMod.zip

    • Size

      12KB

    • MD5

      1a98b00c5587292895c85541436193d0

    • SHA1

      c34fc3e6143d9492ea898cd4a32dab4db8b120f9

    • SHA256

      2ddfae5778e1192369d8cd67c72bccff751bf15c5d6c59ba309002212898645e

    • SHA512

      323331f820237e218bb67b52921fa4e7822120ca383a56271b17f93a26602f61e50deec7c44e7fbd6c52d9d7cf16a4b71dd3c6ac9098d8afc49dcfaee267aba8

    • SSDEEP

      384:3OCiGPG00LhB5D1fAVEMRtGNoDH0trTljgb10i:3OCiN009PB09tGNLrTNgbp

    Score
    1/10
    behavioral12

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/Vixenasjdhgasjhd.zip

    • Size

      15.9MB

    • MD5

      ceb81b6f1693a9ab5e52d597fed77fab

    • SHA1

      b0a5e1c957b89f133a9126b597eeaf84d44c336d

    • SHA256

      7a72f2342c810e3175bd655fb91312870255b160f9727ebb985773d3d23494e2

    • SHA512

      8d75df9ef355b6a66146dd8b0b836a0bb86db451dea93ff441f68b1d79d551617906047f882808a687f1cdd2014e2d29150dd9479013cef6778b914afa33cf3d

    • SSDEEP

      393216:/eUtqi7yknLN5CxyhfZO5klV62LJHaVMncM9WWHn:WJi7L8xyhaq6qHau39x

    Score
    1/10
    behavioral13

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/_IbuiBrawler.zip

    • Size

      1.2MB

    • MD5

      820aa7ac36288787c3370ad4d111c10a

    • SHA1

      60414697ff6ca71450ae619ffb79b7a837c8e967

    • SHA256

      fc74a486ceb884806dbe9ec35db81677b0bf0e64893c4050a2bb7c3d77e8d2c1

    • SHA512

      de695b6cbe0a93663c497df55b719ce1017b24fc0132c1ae9c044f01873a88b854817400da7e4fbe859f8c594ae3bbba6b31cd97b459c1e449403123b45c614e

    • SSDEEP

      24576:pDwevl3jWB5szT0U0pJjZMsRx6LG/2wX+JFLoDnoX+JQLm2:t5vlT3jQtIyXIBoIIIm2

    Score
    1/10
    behavioral14

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/char_loader.zip

    • Size

      240KB

    • MD5

      e3e0a5171b746e1bfd7ee4e2dac86616

    • SHA1

      9f242b91cd3d406f84e4be4470e727ddc5cd79a1

    • SHA256

      67679b6b26834c8a859828ee1cd56a136a02c92643572efaa800e027cd8ca4c8

    • SHA512

      e6c089eba3b158bc0c2eff38623077dacbbc238f505eb1c8304e30931df9b4e7bc87efc756bdc3281d56b5ce9b94b61b5cb2018a9bc6ea3d833beacdd4d2a16d

    • SSDEEP

      6144:sI9P9ZtN5Hc7OLREqs+G7c1J6srs5SRXCG:sI9xNSuoiJ6Q

    Score
    1/10
    behavioral15

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/mods/custom_stage_loader-1.5.3.zip

    • Size

      55KB

    • MD5

      5286f143570f1e525a183391f8fdfbc1

    • SHA1

      cb33a54e6678f76ceaf52b8f80a2e55269350ced

    • SHA256

      24f3e092ef2d9b45d6651ee082ff1d9752990d1e7c80005d11582ed1232a60f0

    • SHA512

      348a4358549b510f87d6726a94887bcc8206cfafd57ffb9139eace58619567779d248d2f3cadccd6ed513a7dafec7af82ec3bf5ffc5b89b3c56eb037e8fcfe7e

    • SSDEEP

      1536:c4ENL4CDH9ZgoNAE9TzXv9JkDdAF7OP97vLlEdRBsCtLjIPpjC4izHsJ73HViXnj:c4ENV3TqfvLlEdRBsj6Ms

    Score
    1/10
    behavioral16

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/steam_api64.dll

    • Size

      1.9MB

    • MD5

      37a7e0deae6e7bd1154f8fd059f9a241

    • SHA1

      5787b8db0d0d656d13474cd7d2caf66c443e181c

    • SHA256

      eb9b78ef3c339591c1993c9c364098de386edd391e1169ea0a6daa39ae9735a9

    • SHA512

      6d375c3abceb83a48b277ebafa7da24128fa97cdde7b3f3e89970671582ff3af8a413fead8d074127a97fc34cc423fd218f878ee3a218f6f28be3aededbf83f7

    • SSDEEP

      24576:0Nip4KmiEeJARIEOzje4nKGyAJ1VyKm9m0DKXC5CMcWXoyefCJXS0abv:EM/mIYI37p7VyKmTcMcWXAfCHab

    Score
    1/10
    behavioral17

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/steam_api64.dll.bak

    • Size

      291KB

    • MD5

      6b4ab6e60364c55f18a56a39021b74a6

    • SHA1

      39cac2889d8ca497ee0d8434fc9f6966f18fa336

    • SHA256

      1db3fd414039d3e5815a5721925dd2e0a3a9f2549603c6cab7c49b84966a1af3

    • SHA512

      c08de8c6e331d13dfe868ab340e41552fc49123a9f782a5a63b95795d5d979e68b5a6ab171153978679c0791dc3e3809c883471a05864041ce60b240ccdd4c21

    • SSDEEP

      3072:504VEQ2u/niy9UVLCe9ZqdrP+VXvv+sJYB2RHKBi65lhTbCc+hnvvEyP7yq+uei1:QZu/i874ZcrMv2cRh7yqO2CPLHxYq8/B

    Score
    1/10
    behavioral18

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/steam_settings/settings/account_name.txt

    • Size

      8B

    • MD5

      5028563b50b2f000e291a825e95329e1

    • SHA1

      2d2daae52dcafdd8a1351b23a9232cb31dd9035f

    • SHA256

      c575a0aca29870d7a02b83542b457f06efb465aa84f051aedd01087c346c1d0b

    • SHA512

      502a680f7ef8d6c84d5889cac3093071f98633991def2321c78655ccab4b44d897d5eab98ebf183353525d8d7900cd8a0436f3bab62c9c7436ff8163c699c7f2

    Score
    1/10
    behavioral19

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/steam_settings/settings/language.txt

    • Size

      7B

    • MD5

      ba0a6ddd94c73698a3658f92ac222f8a

    • SHA1

      1b669334dae8ebafa433f0175b5fd418a7bc0975

    • SHA256

      b6234d2ea0d6022be63db80d7b80e221097fe4a469dc44febcd2a9241effdeba

    • SHA512

      0882b702e0f4c1db1701789796ab1d12d72627811b67299bf36b9b25c29465cc24e72483d171c435368dc9f777837d2bd45ccff293de2207d32ba58a6ac01023

    Score
    1/10
    behavioral20

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/steam_settings/settings/listen_port.txt

    • Size

      5B

    • MD5

      76bf79e9a0a4c128d97dbd6900773f4b

    • SHA1

      8abb38a924d5bf8a1ee12fe96aa2d2be942704d6

    • SHA256

      45095e3e3f29ea73ffab2e23158b7cd2afa6532004b5a9b6f06d4e5e068a89aa

    • SHA512

      8cd54c07d87c41103d963eb7dfd2642b07bb67ceb731b477fc9cd9b736ab03833dc2e2d0b2eb399002d76d405a20d5816d19d77ef760d7dac0c1a67d80662535

    Score
    1/10
    behavioral21

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/tbfg.dll

    • Size

      1.0MB

    • MD5

      b7a07348e173ee92458c740dd4387c9b

    • SHA1

      280895870c062e2d5c1beb852883297f9923ba7c

    • SHA256

      0184a42e8390dcc3af4f19a5781b65deca5ed06082acd4a2b2dd67121b10514f

    • SHA512

      e4dd403156410c651ee48ce6fbe3bc4bff37fd25cdf334500786ef875d38c8d8b009f6631c5222195986cd56e85944faae3bd7ac25a1ce21934fd561f8827665

    • SSDEEP

      12288:Tn0OQjNONMIc7mjFlq6Xlbv96zBwpXEW1zsQP8jajsQ:1FKIMeFkelbv96zBTW1zsQP80s

    Score
    1/10
    behavioral22

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/tbfg.so

    • Size

      4.8MB

    • MD5

      ca018bb8423fb693c976c005f4ef63b8

    • SHA1

      f05eff0610482057b3b7a5b894bb8a3b0a752515

    • SHA256

      a50bc0e7a29993c3791ee3c8cddb210e57062b6d6c64c53264f1fc2dc6328c18

    • SHA512

      dc7a095dca85c97520e6d2afec5bdb8e32ebe1b6deca430801ef4ea37a28553ad085841fefb0c1291909a701a66c2a971ab9fc42dcf69716b8f78981b1bfb8c3

    • SSDEEP

      49152:jEFi1yIrlCKaYWHKPtP7hjW1xsVF9Y6Ju9gNtEtBEDaeiFdYClUK9WjXnFFrUS2o:dUijW1xs5Dk6CuqT1q

    Score
    3/10
    behavioral23

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/Your.Only.Move.is.HUSTLE.v1.7.0/vcruntime140.dll

    • Size

      96KB

    • MD5

      f12681a472b9dd04a812e16096514974

    • SHA1

      6fd102eb3e0b0e6eef08118d71f28702d1a9067c

    • SHA256

      d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8

    • SHA512

      7d3accbf84de73fb0c5c0de812a9ed600d39cd7ed0f99527ca86a57ce63f48765a370e913e3a46ffc2ccd48ee07d823dafdd157710eef9e7cc1eb7505dc323a2

    • SSDEEP

      1536:BxhUQePlHhR46rXHHGI+mAAD4AeDuXMycecb8i10DWZz:Bvk4wHH+mZD4ADAecb8G1

    Score
    1/10
    behavioral24

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/_Redist/dotNetFx40_Full_setup.exe

    • Size

      868KB

    • MD5

      53406e9988306cbd4537677c5336aba4

    • SHA1

      06becadb92a5fcca2529c0b93687c2a0c6d0d610

    • SHA256

      fa1afff978325f8818ce3a559d67a58297d9154674de7fd8eb03656d93104425

    • SHA512

      4f89da81b5a3800aa16ff33cc4a42dbb17d4c698a5e2983b88c32738decb57e3088a1da444ad0ec0d745c3c6b6b8b9b86d3f19909142f9e51f513748c0274a99

    • SSDEEP

      24576:+tW4x8xAxCdUcyezFSjaBHFaNlsqK5/oh6iZf1LUXw/vxNI:d4x8xqCGexm8FCspg0iZf1LUXD

    Score
    7/10

    • Executes dropped EXE

    behavioral25

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/_Redist/dxwebsetup.exe

    • Size

      281KB

    • MD5

      fd6057b33e15a553ddc5d9873723ce8f

    • SHA1

      f90efb623b5abea70af63c470daa8674444fb1df

    • SHA256

      111aeddc6a6dbf64b28cb565aa12af9ee3cc0a56ce31e4da0068cf6b474c3288

    • SHA512

      d894630c9a4bdb767e9f16d1b701acbdf011e721768ba0dc7a24e6d82a4d062a7ca253b1b334edba38c06187104351203a92c017838bdd9f13905cde30f7d94d

    • SSDEEP

      6144:pWK8EGMUjp5cGQ3Mek1B3B9h8Ins3i8AEYBSawz1YSc:JGvjp5cj35kDB9hrs3zARBSaJSc

    Score
    7/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral26

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/_Redist/oalinst.exe

    • Size

      790KB

    • MD5

      694f54bd227916b89fc3eb1db53f0685

    • SHA1

      21fdc367291bbef14dac27925cae698d3928eead

    • SHA256

      b8f39714d41e009f75efb183c37100f2cbabb71784bbd243be881ac5b42d86fd

    • SHA512

      55bc0de75a7f27f11eb8f4ee8c9934dfe1acd044d8b7b2151c506bdcbead3ab179df7023f699c9139c77541bbc4b1c0657e93c34a6bc4309b665c6cb7636a7e5

    • SSDEEP

      12288:0s1yfEcpPzdv+t4cRIy3ze3SUN0PXGTjiqRy2p3kwzjGHTkV:NwfLrvi4cRIyDe3SUNaXy+WypoGHgV

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral27

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/_Redist/vcredist_2015-2019_x64.exe

    • Size

      14.3MB

    • MD5

      f0248d477e74687c5619ae16498b13d4

    • SHA1

      9ed4b091148c9b53f66b3f2c69be7e60e74c486a

    • SHA256

      b6c82087a2c443db859fdbeaae7f46244d06c3f2a7f71c35e50358066253de52

    • SHA512

      0c373b06ffe84f3e803831e90f22d7d73304e47a47839db614f63399ff1b7fcf33153bf3d23998877c96d2a75e316291a219fdd12358ca48928526284b802591

    • SSDEEP

      393216:q5lptVYmfr7yBG/4WoI+j6LTinXKSf0fzTDv8:q7pttD7yBG/uljIinXj0fQ

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral28

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/_Redist/vcredist_2015-2019_x86.exe

    • Size

      13.7MB

    • MD5

      de34b1c517e0463602624bbc8294c08d

    • SHA1

      5ce7923ffea712468c05e7ac376dd9c29ea9f6be

    • SHA256

      ac96016f1511ae3eb5ec9de04551146fe351b7f97858dcd67163912e2302f5d6

    • SHA512

      114bca1ecd17e419ad617a1a4341e607250bcb02626cdc0670eb60be734bbad1f3c84e38f077af9a32a6b1607b8ce6e4b3641c0faefaa779c0fec0d3ac022dac

    • SSDEEP

      393216:/d/FlptVYmfr7yBG/4JU4TRjtjUMy4i6kgsY7i:/1PpttD7yBG/QHTJtYMyke9

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral29

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/_Redist/vcredist_x64.exe

    • Size

      5.5MB

    • MD5

      630d75210b325a280c3352f879297ed5

    • SHA1

      b330b760a8f16d5a31c2dc815627f5eb40861008

    • SHA256

      b06546ddc8ca1e3d532f3f2593e88a6f49e81b66a9c2051d58508cc97b6a2023

    • SHA512

      b6e107fa34764d336c9b59802c858845df9f8661a1beb41436fd638a044580557921e69883ed32737f853e203f0083358f642f3efe0a80fae7932c5e6137331f

    • SSDEEP

      98304:EuLgywiNHBeSLxYK/bxE3q/BlZkWMGPQflVJ/EK1sLyzs2T2Q1mOjq4/:V7wqheSVYK/bua/BlWWnuVhsus8nm+qi

    Score
    7/10

    • Executes dropped EXE

    behavioral30

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/_Redist/vcredist_x86.exe

    • Size

      4.8MB

    • MD5

      b88228d5fef4b6dc019d69d4471f23ec

    • SHA1

      372d9c1670343d3fb252209ba210d4dc4d67d358

    • SHA256

      8162b2d665ca52884507ede19549e99939ce4ea4a638c537fa653539819138c8

    • SHA512

      cdd218d211a687dde519719553748f3fb36d4ac618670986a6dadb4c45b34a9c6262ba7bab243a242f91d867b041721f22330170a74d4d0b2c354aec999dbff8

    • SSDEEP

      98304:RuLgywiN1ah6HcG0UJrN7SDgndrHZDMeaNNjt0CKKBgY2r71pZ/APaOR72HgQo0z:I7wq1W6HqULS8djZDTaNNeCKVP5ORsg0

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral31

    • Target

      Your.Only.Move.is.HUSTLE.v1.7.0/_Redist/xnafx40_redist.msi

    • Size

      6.7MB

    • MD5

      97c2eebb30c5a88c68c8f24f37183f1d

    • SHA1

      49efdc29f65fc8263c196338552c7009fc96c5de

    • SHA256

      e6c41d692ebcba854dad4b1c52bb7ddd05926bad3105595d6596b8bab01c25e7

    • SHA512

      c9d1017b274ceb1b4ee624cf7e628787c32a727c64f715fbce1f1ae929d9114f8fe1291e34583cec615619b0128c01206b07efc878e7a5c57b792453f73fd0da

    • SSDEEP

      98304:wynfL329J1XswfXO6wiBB+4RZg6aENaCZAU5PMO0MntfERyJGH2YPq/:wYD3C1XXfzH+4cLHU5PM/Mnt+YGlq

    Score
    6/10

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
3/10

behavioral24

Score
1/10

behavioral25

Score
7/10

behavioral26

persistence
Score
7/10

behavioral27

discovery
Score
7/10

behavioral28

discovery
Score
7/10

behavioral29

discovery
Score
7/10

behavioral30

Score
7/10

behavioral31

Score
7/10

behavioral32

Score
6/10